NEAS[.]bf851338ca060888a71d412c52f69e60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bf851338ca060888a71d412c52f69e60.exe
Size

9KB
MD5

bf851338ca060888a71d412c52f69e60
SHA1

14d1cf3d670cc3ed9503c1daab1bc2d02d07e24f
SHA256

6e9c0a490541cbcb93dfe4e95ee58838237b91a95474ac529538396f40f5d15c
SHA512

4a104210aed9fa40742098bd4c4d850f7c60e3c4ea8d272828d70e5139c62a1d83dd43fb9ff08c33b2fe562ecadd64c957a2dad5e71eab970d6ff162fe2987ba
SSDEEP

96:Zcov4mcWKh96tgC3RYvmnKymV44HmA4oxfpLkOrKqNDrzZdA/RPWdq0ObUt:G/mcWKG9KmnKfzH7zVB/zMPv0iUt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bf851338ca060888a71d412c52f69e60.exe

Files

NEAS.bf851338ca060888a71d412c52f69e60.exe
.exe windows:4 windows x86

cc40fefa3af5cd00cc28dbd874038a4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 985B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ